openclaw
diff --git a/‎CHANGELOG.md‎
Lines changed: 1 addition & 0 deletions b/‎CHANGELOG.md‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎extensions/onepassword/index.test.ts‎
Lines changed: 10 additions & 1 deletion b/‎extensions/onepassword/index.test.ts‎
Lines changed: 10 additions & 1 deletion
diff --git a/‎extensions/onepassword/index.ts‎
Lines changed: 7 additions & 2 deletions b/‎extensions/onepassword/index.ts‎
Lines changed: 7 additions & 2 deletions
@@ -41,6 +41,7 @@ Docs: https://docs.openclaw.ai
 ### Fixes
 
 - **Mattermost progress command details:** accept the documented `streaming.preview.commandText` and `streaming.progress.commandText` modes in channel config validation and bundled metadata. Thanks @shakkernerd.
+- **1Password authorization handoff:** persist nonce-bound pending approvals in shared plugin state so hook and tool execution across broker instances remain single-use and fail closed.
 - **Control UI chat transcripts:** preserve loaded history across session and pane returns, bound automatic backscroll loading, virtualize long transcripts, and keep prepends, streaming, and responsive layouts from flickering or jumping. Thanks @shakkernerd.
 - **Codex dynamic tool outcomes:** use the shared tool-result failure contract for arbitrary lifecycle metadata, preventing successful Skill Workshop results from being displayed and persisted as failed calls. Fixes #107684. Thanks @shakkernerd.
 - **Nested resource ignores:** honor slash-free patterns and escaped literal exclamation marks in nested ignore files during skill and resource discovery. Thanks @moguangyu5-design.
 
@@ -1,16 +1,18 @@
 import { createTestPluginApi } from "openclaw/plugin-sdk/plugin-test-api";
 import { describe, expect, it, vi } from "vitest";
 import plugin from "./index.js";
+import { MemorySyncKeyedStore } from "./src/memory-store.test-support.js";
 
 describe("onepassword plugin", () => {
-  it("opens bounded fail-closed grant and audit stores", () => {
+  it("opens bounded grant, audit, and pending stores", () => {
     const store = {
       register: vi.fn(),
       lookup: vi.fn(),
       delete: vi.fn(),
       entries: vi.fn(async () => []),
     };
     const openKeyedStore = vi.fn(() => store);
+    const openSyncKeyedStore = vi.fn(() => new MemorySyncKeyedStore());
     const registerCli = vi.fn();
     const registerTool = vi.fn();
 
@@ -23,6 +25,7 @@ describe("onepassword plugin", () => {
         runtime: {
           state: {
             openKeyedStore,
+            openSyncKeyedStore,
             resolveStateDir: () => "/tmp/openclaw-onepassword-test",
           },
         } as never,
@@ -41,6 +44,11 @@ describe("onepassword plugin", () => {
       maxEntries: 40_000,
       overflowPolicy: "evict-oldest",
     });
+    expect(openSyncKeyedStore).toHaveBeenCalledWith({
+      namespace: "pending",
+      maxEntries: 512,
+      overflowPolicy: "evict-oldest",
+    });
     expect(registerCli).toHaveBeenCalledTimes(1);
     expect(registerTool).not.toHaveBeenCalled();
   });
@@ -87,6 +95,7 @@ describe("onepassword plugin", () => {
           config: { current },
           state: {
             openKeyedStore: () => store,
+            openSyncKeyedStore: () => new MemorySyncKeyedStore(),
             resolveStateDir: () => "/tmp/openclaw-onepassword-test",
           },
         } as never,
 
@@ -6,7 +6,7 @@ import {
   resolveLivePluginConfigObject,
 } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
-import type { AuditRow, StandingGrant } from "./src/broker.js";
+import type { AuditRow, PendingAuthorization, StandingGrant } from "./src/broker.js";
 import { OnePasswordBroker } from "./src/broker.js";
 import { MAX_REGISTERED_ITEMS, parseOnePasswordConfig } from "./src/config.js";
 import { OpClient } from "./src/op-client.js";
@@ -54,6 +54,11 @@ export default definePluginEntry({
       maxEntries: MAX_AUDIT_ROWS,
       overflowPolicy: "evict-oldest",
     });
+    const pending = api.runtime.state.openSyncKeyedStore<PendingAuthorization>({
+      namespace: "pending",
+      maxEntries: 512,
+      overflowPolicy: "evict-oldest",
+    });
     const tokenFile = path.join(
       api.runtime.state.resolveStateDir(process.env),
       "credentials",
@@ -82,7 +87,7 @@ export default definePluginEntry({
           opClient: {
             getItem: (params) => resolveCurrentOpClient().getItem(params),
           },
-          stores: { audit, grants },
+          stores: { audit, grants, pending },
         })
       : undefined;